$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa File: 8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa (raw, json) Hash identifier: OrpL0Dy2wVuefGyJ8h5G6YqXqHePSSmwbqEwqPvNOWM= Subject key identifier: 88:7C:A5:6C:66:F9:74:DE:F2:0B:AB:E3:EA:96:C0:44:D2:E2:4C:22 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F89A87BBAAEDF5C9A5E6865E0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 13576 IP address blocks: 66.128.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:7b:ba:ae:df:5c:9a:5e:68:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=9d70089e-4119-4d87-b291-ddb285e8c420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:12:92:22:34:a2:f4:f2:15:a4:8e:77:9a: 4b:c2:f9:11:ce:14:4b:3c:5c:0a:3b:6a:1b:e8:90: 5e:ea:d8:1b:58:d4:ee:1e:d7:09:41:0c:d3:e5:5f: 55:94:62:db:f8:c0:ef:0b:ec:2b:3c:61:2e:48:2a: 89:be:ff:3a:97:cd:04:dd:23:8b:29:a6:ab:0b:25: cc:a5:1d:74:11:a1:4a:de:83:e5:18:ed:ff:c9:39: 21:c7:18:10:14:11:4b:51:6e:98:1e:9d:eb:52:55: d4:9e:0f:65:26:06:ca:d6:22:e3:34:89:24:56:a4: 04:f5:04:5f:4d:7b:d9:34:42:64:86:15:bd:cb:80: ae:d8:24:9e:60:9d:27:0e:e5:44:2a:ca:95:a8:c7: 53:be:cd:e7:bc:83:b0:c4:ef:6f:c9:c2:13:84:f7: 43:8a:cb:31:d0:a0:5f:b3:0d:ab:36:0b:d6:a0:de: e8:d7:d4:d2:34:42:f2:f1:a4:2c:f5:e8:0a:fc:e7: 56:1b:71:c2:5b:00:69:5d:26:80:15:ba:00:81:54: ae:98:fa:f9:03:0a:25:31:7e:39:8c:33:db:5a:f0: a8:32:94:08:3f:d6:a2:5f:d3:91:1f:bb:7a:f3:36: 6e:ba:2b:c1:81:2f:48:9d:8d:97:6f:e4:94:30:28: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7C:A5:6C:66:F9:74:DE:F2:0B:AB:E3:EA:96:C0:44:D2:E2:4C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d997ae4-a8bf-3249-a827-e8d8785da7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:63:29:f0:c2:fd:e4:c5:12:b5:ec:bc:df:c2:d1:59:c1:de: 28:a1:be:35:c2:8a:d3:35:59:78:f1:13:6d:10:e0:4d:1a:07: bd:26:f0:5b:3a:74:55:28:83:6c:56:41:d3:bb:06:d8:5d:f3: 20:3a:77:c6:a1:d6:5b:02:85:12:81:cc:1f:64:2e:d2:d3:6f: 75:b8:71:b1:cf:a4:e0:ab:4e:81:f4:1c:9a:43:d1:ab:9f:6a: 0b:f6:f3:c1:52:9f:41:b1:97:53:0d:e7:1c:96:92:07:0c:4b: db:dd:8b:c5:e0:ab:ee:b7:91:7e:2b:10:45:5b:94:5d:9b:eb: 52:2f:f4:c0:f2:a5:a1:52:92:d2:87:de:b2:a0:5a:3f:01:7f: 51:6f:a8:ce:8d:5e:cb:f8:85:0c:e4:e2:0d:3b:29:91:99:25: 78:17:ef:19:7f:4d:9d:71:89:96:34:94:6c:bf:3f:28:8e:af: 47:e2:1b:8d:f2:cf:df:fb:4a:c2:59:92:05:b3:1a:a1:ea:66: 0e:51:e2:8b:5a:26:ee:67:a4:36:72:89:41:4d:c0:5b:7a:49: 93:37:ae:bc:fd:6e:9c:f9:93:20:e8:40:51:eb:58:c5:3c:2d: f9:7a:bb:08:f7:ea:33:50:cc:46:7a:30:ce:25:66:e5:ac:c9: 1b:c0:88:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqHu6rt9cml5oZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OWQ3MDA4OWUtNDExOS00ZDg3LWIyOTEtZGRiMjg1ZThjNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwToSkiI0ovTyFaSOd5pLwvkRzhRLPFwKO2ob 6JBe6tgbWNTuHtcJQQzT5V9VlGLb+MDvC+wrPGEuSCqJvv86l80E3SOLKaarCyXM pR10EaFK3oPlGO3/yTkhxxgQFBFLUW6YHp3rUlXUng9lJgbK1iLjNIkkVqQE9QRf TXvZNEJkhhW9y4Cu2CSeYJ0nDuVEKsqVqMdTvs3nvIOwxO9vycIThPdDissx0KBf sw2rNgvWoN7o19TSNELy8aQs9egK/OdWG3HCWwBpXSaAFboAgVSumPr5AwolMX45 jDPbWvCoMpQIP9aiX9ORH7t68zZuuivBgS9InY2Xb+SUMChedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh8pWxm+XTe8gur4+qWwETS4kwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOGQ5OTdhZTQtYThiZi0z MjQ5LWE4MjctZThkODc4NWRhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINjKfDC/eTFErXsvN/C0VnB3iihvjXCitM1WXjxE20Q4E0aB70m8Fs6 dFUog2xWQdO7Bthd8yA6d8ah1lsChRKBzB9kLtLTb3W4cbHPpOCrToH0HJpD0auf agv288FSn0Gxl1MN5xyWkgcMS9vdi8Xgq+63kX4rEEVblF2b61Iv9MDypaFSktKH 3rKgWj8Bf1FvqM6NXsv4hQzk4g07KZGZJXgX7xl/TZ1xiZY0lGy/PyiOr0fiG43y z9/7SsJZkgWzGqHqZg5R4otaJu5npDZyiUFNwFt6SZM3rrz9bpz5kyDoQFHrWMU8 Lfl6uwj36jNQzEZ6MM4lZuWsyRvAiBs= -----END CERTIFICATE-----Generated at Sat Oct 24 00:09:41 2026 by rpki-client